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WHAT IS CLAIMED IS: 

1. A switch capable of handling voice-over-IP (VoIP) traffic 
between calling devices and called devices, said switch comprising: 

a plurality of call application nodes capable of 
executing call process server applications, wherein a first call 
process server application is executed on a first one of said 
plurality of call application nodes and is associated with a 
similar second call process server application executed on a second 
one of said plurality of call application nodes separate from said 
first call application node, said first and second call process 
server applications thereby forming a first load sharing group 
server application; and 

a plurality of network address translation nodes capable 
of executing firewall server applications, wherein a first firewall 
server application is executed on a first one of said plurality of 
network address translation nodes and is associated with a similar 
second firewall server application executed on a second one of said 
plurality of network address translation nodes separate from said 
first network address translation node, said first and second 
firewall server applications thereby forming a second load sharing 
group server application, wherein VoIP traffic associated with VoIP 
calls is received by said second load sharing group server 
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application and said second load sharing group server application 
selects one of said first and second firewall server applications 
to verify that said VoIP traffic is authorized to access at least 
one of said call process server applications in said call 
application nodes according to a load distribution algorithm. 

2 . The switch as set forth in Claim 1 wherein said load 
distribution algorithm distributes said VoIP traffic in an 
alternating manner between said first and second firewall server 
applications . 

3 . The switch as set forth in Claim 1 wherein said load 
distribution algorithm distributes said VoIP traffic according to a 
current traffic load of said first firewall server application and 
a current traffic load of said second firewall server application. 

4. The switch as set forth in Claim 3 wherein said load 
distribution algorithm distributes said VoIP traffic in order to 
maintain said current traffic load of said first firewall server 
application at a level substantially equal to said current traffic 
load of said second firewall server application. 
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5. The switch as set forth in Claim 1 wherein said first 
firewall server application comprises a first primary-backup group 
server application, wherein said first primary -backup group server 
application comprises a first primary firewall process executed on 
said first network address translation node and a first backup 
firewall process associated with said first primary firewall 
process . 

6. The switch as set forth in Claim 5 wherein state 
information associated with said first primary firewall process is 
mirrored to said first backup firewall process associated with said 
first primary firewall process. 

7. The switch as set forth in Claim 6 wherein said first 
backup firewall process resides on said first network address 
translation node. 

8. The switch as set forth in Claim 6 wherein said first 
backup firewall process resides on a network address translation 
node separate from said first network address translation node. 
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9. The switch as set forth in Claim 1 wherein said second 
firewall server application comprises a second primary-backup group 
server application, wherein said second primary- backup group server 
application comprises a second primary firewall process executed on 
said second network address translation node and a second backup 
firewall process associated with said second primary firewall 
process . 

10. The switch as set forth in Claim 9 wherein state 
information associated with said second primary firewall process is 
mirrored to said second backup firewall process associated with 
said second primary firewall process. 

11. The switch as set forth in Claim 10 wherein said second 
backup firewall process resides on said second network address 
translation node. 

12 . The switch as set forth in Claim 10 wherein said second 
backup firewall process resides on a call application node separate 
from said second network address translation node. 
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1 13 . A telecommunications network comprising: 

2 a plurality of switches capable of handling voice-over- IP 

3 (VoIP) traffic between calling devices and called devices, each of 

4 said plurality of switches comprising: 

5 a plurality of call application nodes capable of 

6 executing call process server applications, wherein a first 
2 7 call process server application is executed on a first one of 
Jlj said plurality of call application nodes and is associated 
Jfjj with a similar second call process server application executed 
|5 on a second one of said plurality of call application nodes 
|i separate from said first call application node, said first and 

0 

II second call process server applications thereby forming a 

|| first load sharing group server application; and 

CI 

ftp a plurality of network address translation nodes 

15 capable of executing firewall server applications, wherein a 

16 first firewall server application is executed on a first one 

17 of said plurality of network address translation nodes and is 

18 associated with a similar second firewall server application 

19 executed on a second one of said plurality of network address 

20 translation nodes separate from said first network address 

21 translation node, said first and second firewall server 

22 applications thereby forming a second load sharing group 
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23 server application, wherein VoIP traffic associated with VoIP 

24 calls is received by said second load sharing group server 

25 application and said second load sharing group server 

26 application selects one of said first and second firewall 

27 server applications to verify that said VoIP traffic is 

28 authorized to access at least one of said call process server 
2 r 9 applications in said call application nodes according to a 
3^5 load distribution algorithm; and 

an Internet protocol (IP) packet network for 
interconnecting said plurality of switches; and 

}f at least one media gateway coupled to said IP packet 

is 

jjfj network. 

69 

0 14. The telecommunications network as set forth in Claim 13 

RJ 

2 wherein said load distribution algorithm distributes said VoIP 

3 traffic in an alternating manner between said first and second 

4 firewall server applications. 
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15. The telecommunications network as set forth in Claim 13 
wherein said load distribution algorithm distributes said VoIP 
traffic according to a current traffic load of said first firewall 
server application and a current traffic load of said second 
firewall server application. 

16. The telecommunications network as set forth in Claim 15 
wherein said load distribution algorithm distributes said VoIP 
traffic in order to maintain said current traffic load of said 
first firewall server application at a level substantially equal to 
said current traffic load of said second firewall server 
application. 

17. The telecommunications network as set forth in Claim 13 
wherein said first firewall server application comprises a first 
primary-backup group server application, wherein said first 
primary-backup group server application comprises a first primary 
firewall process executed on said first network address translation 
node and a first backup firewall process associated with said first 
primary firewall process. 
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18. The telecommunications network as set forth in Claim 17 
wherein state information associated with said first primary 
firewall process is mirrored to said first backup firewall process 
associated with said first primary firewall process. 

19. The telecommunications network as set forth in Claim 18 
wherein said first backup firewall process resides on said first 
network address translation node. 

20. The telecommunications network as set forth in Claim 18 
wherein said first backup firewall process resides on a network 
address translation node separate from said first network address 
translation node. 

21. The telecommunications network as set forth in Claim 13 
wherein said second firewall server application comprises a second 
primary-backup group server application, wherein said second 
primary-backup group server application comprises a second primary 
firewall process executed on said second network address 
translation node and a second backup firewall process associated 
with said second primary firewall process. 
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1 22. The telecommunications network as set forth in Claim 21 

2 wherein state information associated with said second primary 

3 firewall process is mirrored to said second backup firewall process 

4 associated with said second primary firewall process. 

1 23. The telecommunications network as set forth in Claim 22 

2 wherein said second backup firewall process resides on said second 
% network address translation node. 
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24. The telecommunications network as set forth in Claim 22 
wherein said second backup firewall process resides on a call 
application node separate from said second network address 



ftf translation node. 
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